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1-9. (Canceled) 

10. (new) Method for securing logical access to information and/or computing resources 
in a group of computer equipment while slowing down said logical access as little as 
possible, said group of computer equipment exchanging data with a computer 
telecommunication network via an access device comprising an operating system, and 
said data comprising transported data that conform to at least one application 
protocol, as well as transport data, said method comprising the steps of: 

defining a finite-state machine for each application protocol; 

modeling each finite-state machine in the form of a model; 

generating from each model, an analysis module for each application protocol 
by means of an interpreter; and 

filtering the transported data in said operating system by means of said 
analysis modules. 

U. (new) The method of claim 10, further comprising the step of verifying the 
conformity of said transported data with the application protocols involved by means 
of said analysis modules. 

12. (new) The method of claim 10, further comprising the step of restricting the 
capabilities offered by an application protocol by means of said analysis module. 

13. (new) The method of claim 11, further comprising the step of restricting the 
capabilities offered by an application protocol by means of said analysis module. 

14. (new) The method of claim 12, further comprising the step of parameterizing said 
analysis modules in accordance with predetermined restrictions by a network 
administrator. 
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15. (New) An access device for securing logical access to information and/or computing 
resources in a group of computer equipment while slowing down said logical access 
as little as possible, said group of computer equipment exchanging data with a 
computer telecommunication network via said access device, and said data 
comprising transported data that conform to at least one application protocol, as well 
as transport data, said access device comprising: 

an operating system that includes an appropriate analysis module for each 
application protocol; 

a filtering module for filtering said transported data in said operating system 
by means of said analysis modules. 

16. (new) The access device of claim 15, wherein each analysis module implements a 
finite-state machine representing a given application protocol. 

17. (new) The access device of claim 15, wherein said analysis modules comprises a first 
information processing module for verifying the conformity of said transported data 
with said application protocols involved. 

18. (new) The access device of claim 15, wherein said analysis modules comprises an 
information processing module for restricting the capabilities offered by an 
application protocol. 

19. (new) The access device of claim 18, further comprising a parameterization module 
for parameterizing said analysis modules in accordance with predetermined 
restrictions by a network administrator. 

20. (new) The access device of claim 16, wherein said analysis modules comprises a 
first information processing module for verifying the conformity of said transported 
data with said application protocols involved. 
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21. (new) The access device of claim 16, wherein said analysis modules comprises an 
information processing module for restricting the capabilities offered by an 
application protocol. 

22. (new) The access device of claim 17, wherein said analysis modules comprises a 
second information processing module for restricting the capabilities offered by an 
application protocol . 
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